Description
Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.
Published: 2026-10-02
Score: 4.3 Medium
EPSS: n/a
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 02 Oct 2026 22:00:00 +0000

Type Values Removed Values Added
Description Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.
First Time appeared Kentico
Kentico xperience
Weaknesses CWE-425
CPEs cpe:2.3:a:kentico:xperience:*:*:*:*:*:*:*:*
Vendors & Products Kentico
Kentico xperience
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}

Subscriptions

Kentico Xperience
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-02T21:51:34.920Z

Reserved: 2026-10-02T21:51:34.086Z

Link: CVE-2026-105046

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-02T22:16:54.373

Modified: 2026-10-02T22:16:54.373

Link: CVE-2026-105046

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses